CVE-2026-46038
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: net: qrtr: ns: Free the node during ctrl_cmd_bye() A node sends the BYE packet when it is about to go down. So the nameserver should advertise the removal of the node to all remote and local observers and free the node finally. But currently, the nameserver doesn't free the node memory even after processing the BYE packet. This causes the node memory to leak. Hence, remove the node from Xarray list and free the node memory during both success and failure case of ctrl_cmd_bye().
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedMay 27, 2026
First seenMay 27, 2026
Weakness typeCWE-401CWE-401
How to fix
Update
- linux linux_kernel6.6.140, 6.12.86, 6.18.27, 7.0.4 or later
Patches
- git.kernel.org/stable/c/076e4b162d6caba12c229e7f262df5b6881162b0
- git.kernel.org/stable/c/154fc7fe3f62c46891c3c4302f4b5b5391c932e6
- git.kernel.org/stable/c/65932f5102bb5377db36c8a4f0c28179a1967a9a
- git.kernel.org/stable/c/68efba36446a7774ea5b971257ade049272a07ac
- git.kernel.org/stable/c/ff78ed177a66763085e3214d6fbe13ca8f0b3f11
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.7 ≤ v < 6.6.140, 6.7 ≤ v < 6.12.86, 6.13 ≤ v < 6.18.27, 6.19 ≤ v < 7.0.4 | 6.6.140, 6.12.86, 6.18.27, 7.0.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.